00. Exposing a Currently Active Domains Portfolio of Known 419 Scammers and 
International Fraudsters - An OSINT Analysis - Part Three 
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Sample domains known to have been involved in the campaign include: 


nrfcollection.com 
porters-solicitors.com 
end-time-prophecy.info 
pragenmetis.com 
lloydsbank.cam 
metrobankplc.credit 
uba-forex.org 
whitfieldinspires.com.ng 
instantbox.info 


atlantia.group 
lucid-is.com.ec 
aplusarts.us 
realtor-department.com 
electro-niks.com 
gccinvestorsgroup.com 
unitednations-un.org 
britishimmigrationvisa.co 
cfrc.us 

uskgroup-corp.com 
sunlifefsc.us 
6x4.photography 
gmqgroup.com 
emblemwelt.info 
championbluefrenchies.com 
property-type.com 
nametest.us 
bnkkofameric.com 
standarddeliveryservice.us 
ifcnig.org 
fojolostrichranch.com 
ichaonya.us 
bsdevelopment.com 
universalglobalcompany.com 
schwarzwald-erleben.info 
vanothuisebv.com 
ameriunited.us 

kkrka.biz 
allbulldogpuppies.com 
vantagers.info 

mail-pay.de 

violetcrew.biz 

mail-pay.org 
learnfastbyshelton.com 
coperatefinance.biz 
bankofengland.net.in 
terekilpane.com 
mondiaz.com 
aseycon.com 
scotiabankmobiletrinidad.com 
international-cargo-transporting.com 
bontechservices.com 
suboceanservices.com 
jhon-mail.com 


froisgras.com 
cebuhash.org 
watkinglogistics-hr.net 
senatorcrewing.com 
seabayglobal.com 
arthurgrahamlaw.com 
airbnb-consultant.com 
pomskieshomepup.com 
lovelystbernards.com 


Sample responding IPs known to have been involved in the campaign include: 


69.64.147.242 
68.183.250.107 
69.162.115.82 
208.91.196.34 
198.54.117.197 
170.178.168.203 
127.0.0.4 
185.224.137.145 
198.54.117.199 
52.89.173.169 
209.99.64.33 
208.91.197.241 
172.67.176.15 
104.21.72.66 
66.96.130.134 
185.148.144.161 
141.8.224.159 
46.16.188.7 
198.105.244.111 
5.10.68.188 
5.10.68.190 
157.112.147.7 
103.240.80.48 
207.148.248.143 
198.54.117.217 
198.54.117.210 
5.153.10.226 
44.240.21.170 
108.179.217.243 
98.139.135.199 
8.5.1.16 
104.21.67.112 


198.54.117.200 
44.236.180.18 
192.185.190.9 
184.168.221.50 
74.208.87.54 
66.147.244.166 
69.172.201.208 
131.153.51.26 
36.86.63.182 
108.163.184.66 
199.168.189.152 
91.195.241.137 
218.93.250.18 
103.120.80.144 
199.168.189.130 
104.18.60.151 
208.91.197.44 
185.224.138.195 
208.131.150.31 
98.124.243.32 
104.239.157.210 
162.255.119.116 
23.253.126.58 
184.154.45.10 
198.54.117.198 
91.195.240.87 
184.72.224.62 
54.209.191.40 
131.153.51.122 
3.91.125.102 
166.78.101.108 
23.22.216.95 
18.232.40.189 
81.91.170.22 
216.58.208.211 
45.130.41.12 
107.190.141.194 
188.241.58.142 
23.195.69.108 
149.56.251.98 
47.91.107.43 
192.64.119.247 
23.202.231.168 
104.18.61.151 


82.165.94.152 
217.160.223.92 
195.186.208.193 
142.11.232.120 
198.54.117.216 
80.251.18.8 
198.54.117.211 
173.236.72.116 
8.5.1.31 
104.27.133.171 
23.62.61.24 
198.105.254.74 
46.17.101.36 
41.185.8.168 
174.138.191.187 
46.17.101.39 
66.252.9.204 
41.185.84.5 
5.187.3.228 
103.232.215.140 
198.105.244.74 
198.54.117.215 
192.64.119.211 
173.236.72.115 
198.54.117.218 
91.195.240.117 
18.119.154.66 
34.196.72.62 
199.59.243.211 
3.140.13.188 
173.212.207.177 
173.212.207.183 
54.208.174.161 
199.59.243.201 
52.201.19.170 
199.59.240.200 
146.112.61.107 
199.59.243.221 
192.64.119.3 
158.255.6.169 
104.27.132.171 
80.211.196.184 
198.54.117.212 
173.212.207.184 


91.235.116.180 
13.248.196.204 
184.154.216.244 
208.91.197.46 
23.202.231.167 
204.11.56.48 
23.217.138.108 
72.52.178.23 
23.195.69.112 
52.4.209.250 
89.31.143.1 
183.181.82.73 
81.92.80.56 
52.2.78.115 
104.24.126.85 
81.92.80.55 
67.227 .226.240 
199.79.63.241 
208.91.197.87 
82.165.92.37 
217.160.231.145 
52.22.210.53 
199.79.63.243 
162.0.215.26 
199.79.63.110 
52.202.232.200 
199.79.63.239 
54.165.247.131 
199.79.63.227 
47.91.205.63 
198.105.254.111 
35.203.68.147 
154.91.52.182 
104.239.213.7 
54.95.146.233 
38.26.155.227 
185.230.60.161 
185.230.63.96 
184.168.221.34 
50.63.202.52 
91.195.240.94 
212.224.112.92 
46.29.18.230 
217.160.231.80 


209.99.40.223 
82.165.68.96 
47.88.84.51 
209.99.40.222 
89.31.143.16 
109.228.13.147 
213.219.39.240 
89.31.143.14 
216.239.36.21 
217.160.0.79 
216.239.38.21 
104.152.168.42 
216.239.32.21 


We'll continue monitoring the campaign and will post updates as soon as new developments 
take place. 


